high7.2Public exploit code
CVE-2011-4558
Tiki 8.2 and earlier allows remote administrators to execute arbitrary PHP code via crafted input to the regexres and regex parameters.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Tiki Wiki CMS Groupware 8.2 - 'snarf_ajax.php' Remote PHP Code Injection2011-12-22 · webapps · php
Impact
Tiki 8.2 and earlier allows remote administrators to execute arbitrary PHP code via crafted input to the regexres and regex parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tiki | Tiki | through 8.2 |